Nashr.

Receive
Send files

Privacy Policy

This policy explains what information Nashr collects, why, and how long we keep it. We collect as little as possible.

Last updated 24 October 2026

What we collect

  • Files you upload, stored only until the link expires or reaches its download limit.
  • Transfer details: file names and sizes, title and message (if you add them), expiry, download count and a 6-digit receive code.
  • File fingerprints: a SHA-256 hash of each file, used to check it against known malware and to block files that were removed.
  • Your email, only if you ask for a download alert.
  • Your Google account name, email address and profile picture, only if you sign in with Google to make file requests or use My transfers. We do not get your Google password or any other Google data.
  • Technical data: your IP address is turned into a one-way hash for rate limiting and abuse prevention. We do not store raw IP addresses with transfers.
  • Passwords are stored only as secure hashes and cannot be read back.

Private mode

In private mode your files are encrypted in your browser before they upload. The key stays in the part of the link after the # sign, which browsers never send to our servers. We cannot open, preview or check private files.

How we use it

To deliver your files, show download pages, send the emails you asked for (download alerts and file request notices), prevent abuse and keep the service secure. We do not sell personal data and we do not use your files for advertising or AI training.

Malware checks

To protect the people who download your files, we look up each file’s SHA-256 fingerprint with MalwareBazaar (abuse.ch) and OPSWAT MetaDefender. Only the fingerprint is sent, never the file or its name. A fingerprint cannot be turned back into the file.

How long we keep it

Files are deleted when the link expires (at most 7 days on the free plan) or soon after the download limit is reached. Records of finished transfers and file requests are deleted 90 days after they end. Fingerprints of files removed for abuse are kept so the same file cannot be uploaded again. Abuse reports are kept as long as needed to handle them.

Who we share it with

Service providers that help us run Nashr, only for that purpose:

  • Cloudflare: file storage (Cloudflare R2), network security and the Turnstile bot check.
  • Google: sign-in with Google, and Google Analytics to count visits.
  • Our web host and email provider: to run the site and send emails.
  • abuse.ch and OPSWAT: file fingerprints only, for malware checks.

We may disclose information when the law requires it.

Analytics

We use Google Analytics (through Google Site Kit) and Jetpack Stats to see how many people visit and which pages they use. These reports are about the site as a whole, not about your files. Download pages are never shown to search engines.

Cookies

We use cookies the site needs to work, such as keeping you signed in or remembering that you unlocked a password-protected transfer, plus analytics cookies. See our Cookie Policy.

Your rights

You can ask us to delete a transfer or any personal data we hold about you. If you signed in with Google, you can also delete your transfers yourself in My transfers. Email support@nashr.tech.

Changes

We will update this page if our practices change and show the date of the latest version at the top.